Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
File: 8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft (raw, json)
Hash identifier: 7K7SEOnPK2RnPU7pQtHuhl2MOXxxGk95Dnoc6CQYhGY=
Subject key identifier: D1:39:DD:EC:6D:B9:C8:AB:09:40:A6:86:17:D5:B6:6A:4D:E5:89:6C
Authority key identifier: F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D
Certificate issuer: /CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d
Certificate serial: 01A0CE91CAA3D2BFAB07E56B6F16A10720C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
Manifest number: 0628
Signing time: Wed 23 Sep 2026 14:00:56 +0000
Manifest this update: Wed 23 Sep 2026 14:00:56 +0000
Manifest next update: Thu 24 Sep 2026 14:00:56 +0000
Files and hashes: 1: 8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl (hash: ZKVSVUZ6jW0doOa2pn6FQSdoEUFYXI0PjDanGBW8lm8=)
2: o8MqcHzucQsFFcM064UV8vGpwI8.roa (hash: 7pKszhiXxG9eq/C8SaAv1aRWIQRMOmuuO6Lbmdi5cKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:ca:a3:d2:bf:ab:07:e5:6b:6f:16:a1:07:20:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d
Validity
Not Before: Sep 23 14:00:56 2026 GMT
Not After : Sep 24 14:00:56 2026 GMT
Subject: CN=d139ddec6db9c8ab0940a68617d5b66a4de5896c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2a:e4:1c:d8:e6:d2:bb:4d:b7:60:0d:1d:f3:
bf:00:4c:d7:5e:3c:e3:e8:2e:b3:df:c3:5d:72:3e:
dd:e4:66:eb:04:3a:44:19:c8:8d:a1:b4:3c:42:e5:
b7:5a:6b:59:19:ee:76:3d:ac:ca:cc:78:bf:dd:7a:
88:ba:60:02:47:ec:4a:4b:f1:f7:23:a1:15:6d:83:
c4:e3:64:c3:99:4a:d6:50:6d:11:f1:48:98:cc:9b:
73:7e:a7:dc:80:61:50:78:0a:f6:d0:d1:ab:98:f0:
18:22:27:2a:c7:4e:43:a1:e6:5a:bf:19:1e:b2:0c:
50:e1:8d:5e:8e:5c:cf:e1:7d:dc:3c:f3:bf:2e:88:
27:f5:49:7d:14:83:5b:7e:2c:1a:7b:9d:b4:aa:25:
34:56:07:09:8a:82:1f:25:eb:8c:1a:b7:0e:bc:e0:
7a:d6:92:2e:78:94:d2:03:76:b4:db:b8:68:ac:70:
c5:ba:7c:8d:ab:78:9c:2b:0f:5a:71:85:6f:e8:20:
7c:e7:ff:14:ab:c9:13:73:62:d0:25:34:b0:b9:f4:
19:11:28:bc:bb:04:82:fc:39:37:5d:e3:59:04:ca:
68:22:6f:24:8a:e3:23:13:b9:50:53:8a:1d:1d:0d:
6a:a2:02:4a:c5:ec:82:92:c8:de:bc:f6:10:7e:af:
60:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:39:DD:EC:6D:B9:C8:AB:09:40:A6:86:17:D5:B6:6A:4D:E5:89:6C
X509v3 Authority Key Identifier:
keyid:F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b3:0f:8e:f4:89:8a:97:de:34:f7:29:5c:58:79:2f:3a:78:
cd:c6:bc:ee:b6:75:10:5b:3e:16:00:5b:b2:4e:aa:1f:21:8d:
67:f2:85:25:23:2d:bb:61:a2:01:6a:0a:c2:5e:52:9f:e0:91:
8a:e5:b5:34:79:66:40:57:74:52:8f:2b:c2:ec:d7:80:bd:40:
15:ce:92:f7:23:a8:a9:df:72:bb:e2:7f:9e:9e:ab:54:b3:86:
90:db:ec:71:9e:62:47:b5:58:9f:85:7f:08:95:aa:ba:01:f3:
04:24:79:af:c7:13:6f:19:21:ed:83:37:26:92:26:d3:68:7c:
b4:0a:58:be:29:93:ba:19:39:26:16:be:84:99:40:8c:46:8e:
c0:b4:ee:17:d6:24:55:86:d9:82:06:ec:12:f2:d6:84:da:52:
ab:85:da:43:c5:9a:77:1e:d1:ef:69:ea:85:4d:46:ca:09:dd:
f1:05:44:68:fe:aa:51:be:97:fa:1e:57:2a:3e:b6:52:01:8a:
86:7f:e3:fa:1f:41:a5:43:59:6f:23:40:58:fa:94:1f:19:d7:
61:5d:ec:bd:9e:02:73:ce:5a:3a:c2:10:96:5a:6b:0b:b3:00:
e7:49:b2:ed:aa:48:8a:2a:2f:db:07:1c:8e:15:4d:1d:0f:72:
f4:ed:1a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:50:52 2026 by rpki-client